Exchange Virtual Servers Source Traffic

Hi Gerald,

 

 

What are you trying to do with the source IP address information? Report on it or take some action like throttling them?

 

 

For reporting, if you're on 10.1+ or can upgrade to it, you could use High Speed Logging to log each TCP connection (or HTTP request) to a remote pool of syslog servers. In some informal perf testing of HSL I saw very little additional CPU used when logging every HTTP request to a VS (up to the max of the test equipment at ~200k requests/second). See the HSL wiki page for details on using high speed logging from an iRule: http://devcentral.f5.com/wiki/default.aspx/iRules/hsl

 

 

To take action based on the client IP, you could use the table command to track which IPs are accessing the virtual server: http://devcentral.f5.com/wiki/default.aspx/iRules/table

 

 

Aaron